RE: Question about Citadel

["Steven M. Sarmiento" <[EMAIL PROTECTED]>]

Steve,
I tested a product called Hercules.  It was a patch management system that's architecture was based
on remediation servers connected to a centralized server that Citadel controlled.  They would screen
and test OEM patches before integrating them into their enterprise patch management system.  They
have a licensing scheme that was a little different but the product worked okay.
It assists in patch management across different OS.  I noticed that the Linux side of the house was
still problematic with dependencies, but that's kind of a mute point since support of the older
Linux RedHat stuff will be phased out.

One cool feature was that it integrated and aggregated vulnerability reporting from many types of
scanners into one report: (ISS, Nessus, etc)  Helps in checking false positives.

Hope these help:

http://www.citadel.com/Hercules.asp

http://www.cse-cst.gc.ca/en/services/ccs/citadel.html

Steven M. Sarmiento
SATC - NASA GSFC
Code 300 IT Security - DCSE/CSO



-----Original Message-----
From: Steven J Briggs [mailto:[EMAIL PROTECTED]
Sent: Thursday, April 01, 2004 10:10 AM
To: Patch Management Mailing List
Subject: Question about Citadel
I searched through my store of messages from this group and the only reference I found to Citadel
was a complaint about harvesting.
Does anyone have any experience with the product?  I was planning to pilot it.
Steve

---
To unsubscribe send a blank email to [EMAIL PROTECTED]


---
To unsubscribe send a blank email to [EMAIL PROTECTED]